feat: harden plugin and add open source readiness scaffolding#1
Merged
Merged
Conversation
Skills: - tighten allowed-tools (drop unscoped find/sed/curl/oc delete; use Glob) - treat a working kubeconfig as proof of an existing cluster so pre-provisioned customers are never routed to create-cluster - drop redundant user-invocable defaults, add argument-hint to update-image Plugin packaging: - add marketplace.json so the repo serves as its own marketplace - add displayName, fix README install instructions and typo Open source readiness: - CI workflow running 'claude plugin validate --strict' on PRs and main - Release Please config + workflow (bumps plugin.json version, changelog) - Dependabot for GitHub Actions - CONTRIBUTING.md, AGENTS.md, CHANGELOG.md Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Two batches of work from a best-practices + open-source-readiness review:
Plugin hardening
allowed-tools: removed unscopedfind/sed/curl/oc deletepre-approvals;prepare-appuses the Glob tool,expose-app's curl is scoped to the smoke test,statusis now genuinely read-onlyoc whoaminow counts as "has a cluster" even whenindev cluster listis empty (clusters set up by admins/colleagues), so first customers are never routed into creating a duplicatemarketplace.jsonso the repo is installable as its own marketplace,displayName, working README install instructions,argument-hintonupdate-imageOpen source readiness (from the readiness report)
validateworkflow runsclaude plugin validate --stricton every PR and push to main — now a required status check via the newprotect-mainrulesetversionbump inplugin.json(the field that actually delivers updates to installed users) + CHANGELOG + GitHub Releases, driven by Conventional CommitsDone outside this PR (repo settings): description, topics, branch-protection ruleset on
main.Notes for reviewer
fix:/feat:/…) for versioning to work🤖 Generated with Claude Code